Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tk8LMTXHR-vkEzE7mrOyRfOjWII.roa
File: tk8LMTXHR-vkEzE7mrOyRfOjWII.roa (raw, json)
Hash identifier: oAEOJs1eSEQuJaQDddQ7Siwx7SJ0/VxRlPTRbM3cBdg=
Subject key identifier: B6:4F:0B:31:35:C7:47:EB:E4:13:31:3B:9A:B3:B2:45:F3:A3:58:82
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A11C8C1B29A8C66A6CBE5E2AB9DCADD9F3
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tk8LMTXHR-vkEzE7mrOyRfOjWII.roa
Signing time: Thu 08 Oct 2026 17:25:06 +0000
ROA not before: Thu 08 Oct 2026 17:25:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 146.19.56.0/24 maxlen: 24
194.61.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:8c:1b:29:a8:c6:6a:6c:be:5e:2a:b9:dc:ad:d9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 8 17:25:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b64f0b3135c747ebe413313b9ab3b245f3a35882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:83:43:7a:03:c8:f5:c2:7b:f2:8b:5d:4e:
be:29:57:b5:c9:e1:59:52:f2:b6:d9:75:72:39:bf:
21:68:b7:a9:06:5b:9b:20:9e:1e:ab:c2:b3:23:36:
ae:59:8c:30:e6:cd:00:39:b7:f9:1d:90:cb:42:d8:
ee:45:e3:ed:ab:cf:ed:e9:54:51:69:c3:ce:e2:50:
6d:0d:f1:92:5a:41:1b:bf:52:70:06:84:ad:81:fe:
e7:e9:a8:6e:a5:42:89:6f:57:5c:70:9c:2d:5e:68:
83:16:9a:c3:b4:57:b4:ed:7b:d3:33:55:bc:45:69:
6b:ad:a7:0b:05:a6:0a:6e:7a:cb:f2:e7:65:f8:62:
b3:ed:5b:f1:f8:6d:e2:cd:ba:c3:55:87:b0:3d:b4:
33:e3:0a:08:09:3a:07:74:26:2d:c6:9d:86:ac:09:
dc:a4:da:e1:02:16:06:38:98:d0:bc:e7:30:e1:34:
79:27:7a:06:52:65:4b:f3:ad:1b:43:50:01:06:16:
2f:31:c9:c0:18:df:e7:cc:02:00:04:ec:a4:42:21:
4f:a8:26:48:cf:38:8d:54:e4:2f:4c:89:1e:88:12:
5e:64:c2:25:2d:12:2e:31:c5:00:25:80:1b:32:51:
44:4f:11:14:e9:c6:8c:29:35:39:12:48:bb:60:f3:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4F:0B:31:35:C7:47:EB:E4:13:31:3B:9A:B3:B2:45:F3:A3:58:82
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tk8LMTXHR-vkEzE7mrOyRfOjWII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.56.0/24
194.61.75.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ab:27:55:7f:ad:f0:3f:4b:a5:36:7f:79:0b:0b:97:27:a1:
a0:d1:9a:91:44:95:dc:df:49:79:3a:a0:b1:3c:73:b7:fd:96:
ec:c9:30:d1:17:5e:4a:77:58:b6:96:0e:20:bf:c1:29:1f:c2:
c4:10:d5:d6:3c:cb:42:2b:8d:c1:17:d7:21:48:25:85:f7:b7:
87:6e:69:02:90:76:a6:b9:34:2a:21:2a:94:82:85:2d:e1:dc:
48:ec:3f:a6:8c:5e:90:36:1e:1f:cf:19:f6:41:5e:55:f6:07:
ea:a9:c7:01:9b:c3:0b:18:48:2c:cb:a8:90:d6:90:12:a4:e9:
0e:99:ac:10:c1:e9:47:51:7c:a7:d6:64:37:c2:74:71:96:1d:
5e:95:1c:c1:51:0f:92:53:5f:d2:8a:9d:7f:9c:51:e7:7a:47:
ba:fb:95:fe:d1:58:9d:64:71:18:58:29:d9:3f:38:9b:b6:e7:
34:59:ce:90:1a:78:e9:0f:33:64:52:7e:36:0f:27:7c:08:f9:
6d:b4:36:12:c6:78:2d:30:83:c8:31:f4:d3:db:85:3c:50:0e:
e3:51:ef:e4:87:92:ba:7c:35:ed:86:04:ea:c7:d1:97:c4:2f:
b8:d0:63:99:e6:fc:98:04:34:9c:a8:1e:a2:e1:23:77:11:ab:
3b:ab:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:26:50 2026 by rpki-client